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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims; 

1 . (Currently Amended) In a management system including a management 
computer and one or more a plurality of managed computers to be managed by the management 
computer, the management computer comprising: 

a communication device configured to receive operating data of a monitoring 
object inside a first managed computer, from among the plurality of managed computers, and 
information relating to an event; 

a memory to store the operating data received by the communication device, the 
operating data including an identifier associated with the first managed computer : 

a storage device; and 

a processor configured to identify from the operating data received a portion of 
th e op e rating data which relates to the event , compare the identifier associated with the first 
managed computer with a sender managed computer that sends the information relating to the 
event; and 

if it is determined that the first managed computer is same as the sender 
managed computer, storing the information relating to the event and operating data of the 
monitoring object associated with the event, in the memory; and 

if it is determined that the First managed computer is different from the 
sender managed computer, not storing the information relating to the event and operating data of 
the monitoring object associated with the event, in the memory ; 

wherein when the event indicates an occurrence of trouble or a degradation in 
performance of the monitoring object, and the information relating to the event is stored , then the 
operating data received is stored in the storage device, and 
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wherein when the event does not indicate an occurrence of trouble or a 
degradation in performance of the monitoring object or the information relating to the event is 
not stored , then the operating data received is not stored in the storage device. 

2. (Original) The management computer as set forth in claim 1, 
wherein the information relating to the event includes at least one of information 

showing presence or absence of occurrence of the event, information showing an occurrence 
time of the event, and information showing a classification of the event, and 

wherein the processor of the management computer is configured to identify the 
portion of the operating data which relates to the event, based on the operating data and the 
information relating to the event including at least one of the information showing presence or 
absence of occurrence of the event, the information showing the occurrence time of the event, 
and the information showing the classification of the event. 

3. (Original) The management computer as set forth in claim 1 , 
wherein the management computer is configured to manage a plurality of 

managed computers, wherein the communication device is configured to receive operating data 
of monitoring objects inside the plurality of managed computers and information relating to an 
event, wherein the information relating to an event includes host information identifying from 
the operating data received by the communication device a portion of the operating data which is 
received from the managed computer in which the event occurred, and wherein the processor of 
the management computer is configured to identify the portion of the operating data which 
relates to the event, based on the operating data and the information relating to the event 
including the host information. 

4. (Original) The management computer as set forth in claim 3, 
wherein the information relating to the event includes information showing 

presence or absence of occurrence of the event, and wherein the processor of the management 
computer is configured to identify the portion of the operating data which relates to the event, 
based on the operating data and the information showing presence or absence of occurrence of 
the event. 
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5. (Original) The management computer as set forth in claim 1, 

wherein the monitoring object includes at least one of a hardware structure part in 
a storage device connected to the management computer through a network and a program stored 
in the storage device in the managed computer. 

6. (Original) The management computer as set forth in claim 1 wherein the 
portion of the operating data identified by the process is to be used for trouble analysis and to 
carry out the trouble analysis. 

7. (Currently Amended) A management system comprising a management 
computer and a plurality of managed computers which is are managed by the management 
computer, 

wherein a [[the]] first managed computer, fi'om among the plurality of managed 
computers, includes: 

a managed computer processor which is configured to obtain operating 
data from a monitoring object and to generate information relating to an event, the event 
including information indicating trouble occurrence or performance decrement of the monitoring 
object when there is an occurrence of trouble or a decrement of performance with the monitoring 
object; and 

a managed computer communication device which is configured to 
transmit the operating data from the monitoring object and the information relating to the event 
to the management computer, and 

wherein the management computer includes: 

a management computer communication device which is configured to 
receive from th e manag e d comput e r communication d e vic e th e operating data and the 
information relating to the event from the managed computer communication device: 

an operating data buffer to store the operating data received by the 
management computer communication device, the operating data including an identifier 
identifying the first managed computer ; 

a data storage; and 
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a management computer processor which is configured to identify from 
the operating data rocoivod a portion of the operating data relating to the event compare the 
identifier identifying the first managed computer which includes the monitoring object with a 
sender managed computer that sends the information relating to the event, and 

if it is determined that the first managed computer is same as the sender managed 
computer, storing the information relating to the event and the associated operating data of the 
monitoring object associated with the event, in the operating data buffer; and 

if it is determined that the first managed computer is different from the sender 
management computer, not storing the information relating to the event and the associated 
operating data of the monitoring object associated with the event, in the operating data buffer, in 
the operating data buffer. 

wherein when the event indicates trouble occurrence or performance decrement 
and the information relating to the event is stored , then the operating data received is stored in 
the data storage, 

wherein when the event does not indicate trouble occurrence or performance 
decrement or the information relating to the event is not stored , then the operating data received 
is not stored in the data storage. 

8. (Canceled) 

9. (Previously presented) The management system as set forth in claim 7, 
wherein the management computer processor is configured, when the information 

relating to the event is received, to store the information relating to event in the operating data 
buffer in association with the operating data stored in the operating data buffer, to write a part of 
the operating data stored and the information relating to the event from the operating data buffer 
to the data storage, the part of the operating data stored to be written to the data storage relating 
to the event, based on the part of the operating data stored and the information relating to the 
event written to the data storage. 
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10. (Previously presented) The management system as set forth in claim 7, 
wherein the management computer processor is configured, when the information 

relating to the event is received, to store the information relating to event in the operating data 
buffer in association with the operating data stored in the operating data buffer, to determine a 
part of the operating data to be written from the operating data buffer to the data storage based on 
the information relating to the event, and to write the part of the operating data stored from the 
operating data buffer to the data storage, and to carry out the trouble analysis based on the part of 
the operating data stored written to the data storage. 

1 1 . (Withdrawn) A management system comprising a management computer 
and a managed computer which is subjected to trouble monitoring by the management computer, 
wherein the managed computer includes: 

a managed computer processor which is configured to obtain operating data from 
a monitoring object and to generate information relating to an event, the event including 
information indicating trouble occurrence or performance decrement of the monitoring object 
when there is an occurrence of trouble or a decrement of performance with the monitoring 
object; and 

a managed computer communication device which is configured to identify the 

operating data relating to the event and to transmit the operating data identified to the 
management computer, based on the operating data identified and the information relating to the 
event, 

wherein when the event indicates trouble occurrence or performance decrement, 
then the operating data identified is transmitted to the management computer, 

wherein when the event does not indicate trouble occurrence or performance 
decrement, then the operating data identified is not transmitted to the management computer; and 
wherein the management computer includes: 

a management computer communication device which is configured to 
receive the operating data identified from the managed computer communication device; and 

a management computer communication processor which is configured to 
carry out the trouble analysis based on the operating data received. 
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12. (Currently Amended) A management computer for monitoring a 
monitoring object in a managed computer, from among a plurality of managed computers , the 
management computer comprising: 

a communication device configured to receive operating data of a monitoring 
object inside the managed computer and information relating to an event; 

an operating data buffer to store the operating data received by the 
communication device, the operating data including an identifier identifying the managed 
computer : 

a data storage; and 

a processor configured to id e ntify from th e op e rating data r e c e iv e d a portion of 
th e operating data which r e lat e s to th e e v e nt , 

compare the identifier identifying the managed computer with a sender managed 
computer that sends the information related to the event: and 

if it is determined that the managed computer is same as the sender computer, 
storing the information relating to the event and the operating data of the monitoring object 
associated with the event, in the operating data buffer: and 

if it is determined that the managed computer is different from the sender 
management computer, not storing the information relating to the event and the operating data of 
the monitoring object associated with the event, in the operating data buffer. 

wherein when the event indicates an occurrence of frouble or a degradation in 
performance of the monitoring object and the information relating to the event is stored , then the 
operating data received is stored in the data storage, 

wherein when the event does not indicate an occurrence of frouble or a 
degradation in performance of the monitoring object or the information relating to the event is 
not stored , then the operating data received is not stored in the data storage. 
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13. (Previously presented) The management computer as set forth in claim 

12, 

wherein the processor is configured, when the information relating to the event is 
received, to store the information relating to event in the operating data buffer in association with 
the operating data stored in the operating data buffer, to write the operating data stored and the 
information relating to the event from the operating data buffer to the data storage, and to 
identify from the operating data a portion of the operating data relating to the event, based on the 
operating data stored and the information relating to the event written to the data storage. 

14. (Withdrawn) In a management system including a management computer 
and a managed computer to be managed by the management computer, the managed computer 
comprising: 

a processor configured to obtain operating data from a monitoring object and to 
generate information relating to an event, the event including information indicating frouble 
occurrence or performance decrement of the monitoring object when there is an occurrence of 
frouble or a decrement of performance with the monitoring object; and 

a communication device configured to identify from the operating data obtained 
from the monitoring object a portion of the operating data which relates to the event, 

wherein when the event indicates trouble occurrence or performance decrement, 
then the operating data obtained is transmitted to the management computer, 

wherein when the event does not indicate trouble occurrence or performance 
decrement, then the operating data obtained is not transmitted to the management computer. 

15. (Currently Amended) An operating management method for managing 
one or more monitoring objects, located in one or more managed computers, on the basis of 
operating data, the operating management method comprising: 

receiving [[the]] operating data of [[the]] a monitoring object and information 
relating to an event; 

storing the operating data in a memory, the operating data including an identifier 
that identifies a managed computer that includes the monitoring object ; 
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idontifying from the oporating data a portion of the operating data which rolatos to 

comparing the identifier with a sender computer that sends the information 
relating to the event; 

storing, in the memory, the information relating to the event and the operating 
data of the monitoring object associated with the event if it is determined that the managed 
computer is same as the sender computer; 

not storing, in the memory, the information relating to the event and the operating 
data of the monitoring object associated with the event if it is determined that the managed 
computer is different from the sender computer; 

storing the operating data in a storage device when the event indicates an 
occurrence of frouble or a degradation in performance of the monitoring object and the 
information relating to the event is stored , wherein the operating data is not stored in the storage 
device otherwise; and 

displaying the operating data identified. 

16. (Original) The operating management method as set for in claim 15, 
wherein the information relating to the event includes at least one of information 
showing presence or absence of occtirrence of the event, information showing an occurrence 
time of the event, and information showing a classification of the event, and 

wherein the identifying comprises identifying the portion of the operating data 
which relates to the event, based on the operating data and the information relating to the event 
including at least one of the information showing presence or absence of occurrence of the event, 
the information showing the occurrence time of the event, and the information showing the 
classification of the event. 
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17. (Previously presented) The operating management method as set for in 

claim 15, 

wherein the receiving comprises receiving the operating data of a plurality of 
monitoring objects, wherein the information relating to the event includes host information 
identifying from the operating data a portion of the operating data which is received from the 
monitoring object in which the event occurred, and wherein the identifying comprises identifying 
the portion of the operating data which relates to the event, based on the operating data and the 
information relating to the event including the host information. 

18. (Original) The operating management method as set for in claim 17, 
wherein the information relating to the event includes information showing 

presence or absence of occurrence of the event, and wherein the identifying comprises 
identifying the portion of the operating data which relates to the event, based on the operating 
data and the information showing presence or absence of occurrence of the event. 

19. (Canceled) 

20. (Currently Amended) In a computer readable medium storing a program 
for managing a monitoring object on the basis of operating data, the program comprising: 

code for receiving the operating data from a managed computer that includes the 
monitoring object : 

code for storing the operating data in a memory, the operating data including an 
identifier that identifies the managed computer: 

cod e for id e ntifying from th e op e rating data a portion of th e op e rating data which 
r e lat e s to the event ; 

code for receiving information relating to an event from a sender computer; 

code for comparing the identifier with the sender computer to determine whether 
the managed computer is same as or difference from the sender computer: 

code for storing the information relating to the event and the operating data of the 
monitoring object associated with the event if it is determined that the managed computer is 
same as the sender computer: 
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code for not storing the information relating to the event and the operating data of 
the monitoring object associated with the event if it is determined that the managed computer is 
different from the sender computer: 

code for storing the operating data in a storage device when the event indicates an 
occurrence of trouble or a degradation in performance of the monitoring object and the 
information relating to the event is stored , wherein the operating data is not stored in the storage 
device otherwise; and 

code for displaying the operating data identified. 
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